Flexense Sync Breeze Enterprise Server and Disk Pulse Enterprise Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in Flexense Sync Breeze Enterprise Server and Disk Pulse Enterprise, both version 10.4.18. This vulnerability allows an authenticated user to trick another user into performing unintended actions within the application. The issue arises from inadequate implementation of CSRF tokens. Exploitation could involve sending a POST request to delete all commands via a specific endpoint.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, such as deleting commands or potentially other actions depending on the exploited endpoint.